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AinendmeDts to the Claims 

1. (Currently amended) A method for preserving the integri ty of a negotiation comprising 
the steps of; 

a) providing an. architecture v^rhich includes a center A, and a plurality of users 
B.sub.l, B.$ub.2,..., B.sub.n, 

b) generating for each user B.sub.i an input X.sxib,i, 

c) inputting each user's input X.sub.i to the center A, 

d) computing and publishing a function F(X.sub,l,X.sub.2,...jX.sub.n) by the center A 
based on the input messages it receives, 

e) each user B^sub.i (1<- i<= n) communicating with the center A exclusively, and 

f) publishing by center A to each of the users additional information which lets each of 
the users verify that F was computed correctly, and preventing a coalition of any one subset of 
the users from learning (i) anything v/hich cannot be computed just from the output of the 
function, F(X.sub.I,— ^.sub,n), and from their own inputs, and (ii) information about the inputs 
of other users. 

2. (Currently amended) The method of Claim 1 for computing tho output of a sealed bid 
a-oetieR according to claim K where the users are bidders and tlie center is the auctioneer, and 
wherein the input X,sub,i is the bid of bidder B.sub.i, and an output of F is the identity of the 
winning bidder and the amount he has to pay. 

3. (Currently amended) The method according to claim 1 , for computing th e output of a 
Doalod bid auction , where the users are bidders and the center is the auctioneer, and wherein the 
input X.sub.i is the bid of bidder B.sub.i, and an output of F is the identity of the winning bidder 
and the amount to be paid, and wherein the center only makes disclosure to the winning bidder, 
while all other bidders being able to verify that the auction was computed correctly, but do not 
learn any other information. 
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4. (Previously presented) The method according to claim 1, for first price auctions, where 
the output of F i$ (B.sub j, X.sub.j), where X,sub j is greater or equal to any one X.sub.i for 1 <=i 
<=n. 

5. (Prevjoxisly presented) The method according to clairn. 1, for second price auctions 
(Vickrey auctions), where the output of F is (B.sub jl, X,sub.j2), where X.sub j 1 is greater or 
equal to any X.sub.i for 1 <=i <=n, and X.sub.j2 is greater or equal to any X.sub,i for 1 <H <=n 
except for i=jl. 

6. (Previously presented) The method according to claim 1 , for k-th price auctions, where 
the output of F is (B.sub j I, X.sub.j2), where X.subjl is greater or equal to any X.$ub.i for I <=i 
<=n, and X*5ub j2 is the k-th largest among all inputs X^sub.i for 1 <=n <=n. 

7. (Previously presented) The method according to claim 1 wherein the auction is a plural 
auction where there are a plurality of seU^, 

8. (Previously presented) The method according to claim 1 wherein the auction is a 
generalized Vickrey auction. 

9. (Previously presented) The method according to claim I, comprising the stqp of, 
computing the auction such that the auctioneer wants to buy an item and each of the bidders 
wants to sell this item, and wherein negative values of the inputs X.sub.i are possible, 

10. (Previously presented) The method according to claim 1 , comprising the step of; 
computing the output of the auction such that the users leam, in addition, some statistic of the 
inputs, such as, the users can leam at least one of the average of the inputs, the variance of 
the inputs, or how many one inputs were in a certain range. 
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11. (Previously presented) The method according to claim 1. comprising the step of 
computing the output of the functjon such that only the center learns the output of the function, 
or several of the users learn the output of the function, or al] the users learn the output of the 
function. 

12. (Previously presented) The method according to claim 1, comprising the step of, 
computing the output of a mechanism, in particular, for one of Groves-Clark mechanisms, 
opinion polling and stable matching. 

13. (Previously presented) The method according to claim 1, comprising the steps of 
each user committitig to the values of his input in a manner that the user cannot change it 
afterwards, but hiding the input value Scorn the center, at a specific stage, the users opening their 
commitments to their inputs and revealing their values to the center, which then computes the 
value of F in a manner the each of the users can verij^ that the values that were used as inputs for 
computing F were the values that were committed to by the users. 

14. (Previously presented) The method according to claim 1, comprising the step of 
implementing automated agents which participate in the auction which do not disclose to the 
auctioneer the limit price that they were given, until the end of the bidding period. 

15. (Previously presented) The method according to claim 1, comprising the step of 
computing a function where the center can generate a proof that it computed the correct output of 
the function. 

16. (Previously presented) The method according to claim 1, comprising the step of 
computing a function by N centers, such that only if K of the N centers collude they can leam 
information about the parties' inputs. 
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17. (Currently amended) In a system that contains N parties, each, having a private input, 
and a center adapted to compute a function F of said input; apparatus for computing said j&mction 
F in said center, comprising: 

a first progratn provided in the center that enables calculation of said function F; 

circuitry for publishing said function F. to the N parties, using the first program while not 
revealing substantially any information about said input; and 

a second program provided to the parties enabling each one of said parties to prove that 
said function F was calculated correctly. 

18. (Original) In a system according to claim 17, wherein the second program precludes 
the learning of any information other than the function F was calculated correctly. 

19. (Original) In a system according to claim 1 7, wherein the fu^t program includes a 
construction of K garbled circuits for computing function F. 

20. (Original) In a system according to claim 17> wherein said parties are bidders in an 
auction; said input are bids, said center is an auctioneer^ said function F is the rule by which said 
auction is decided, whereby the auctioneer is capable of calculating the result of said auction 
without revealing any information about said bids, except for the identity of the winning party 
from among said parties, and the amount to pay, 

21. (Original) In a system according to claim 20, wherein the function is determined 
utilixing a circuit of gates. 

22. (Original) In a system according to claim 20. wherein the second program includes 
the capability of utilizing the circuit of gates to independently determine and verify that the 
computations of the center are correct. 
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